Online hash checker for Virustotal and other services

Red team & penetration testing tools to exploit the capabilities of Intel AMT

Some of my exploits.

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration te…

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

🔥 A curated list of awesome web-application firewall (WAF) stuff.

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Ghidra is a software reverse engineering (SRE) framework

爬取知识星球内容，并制作 PDF 电子书。

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

❤️中国科学技术大学计算机学院课程资源(https://mbinary.xyz/ustc-cs/)

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

better formatter for /proc/net/

A toolset designed for attacks against common password managers.

IDS/IPS malware download evasion

Credentials recovery project

Automatic SSRF fuzzer and exploitation tool

Ubuntu Linux privilege escalation exploit (CVE-2019-7304)

Impacket is a collection of Python classes for working with network protocols.

A powerful target reconnaissance framework powered by graph theory.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Blind WAF identification tool

Git All the Payloads! A collection of web attack payloads.

Most advanced XSS detection suite.

A forensic evidence collection & analysis toolkit for OS X

A little tool to play with Windows security